DNS Trojan 1.2

DNS Trojan 1.2
(Trojan.PSW.Dnstroj.12 for E-mailWriter.exe)
(Trojan.PSW.Dnstroj.10 system32.dll.exe)

by DNS GROUP

Written in Delphi, compressed with PECompact

Released in May 2002

Made in Russia


Server:
dropped file:
c:\WINDOWS\system32.dll.exe 

size: 240.128 bytes 

startup:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "system32.dll.exe" 
c:\windows\win.ini, [windows] "run"

MegaSecurity